CVE-2015-7393
dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AFM and PEM 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP DNS 12.0.0 before 12.0.0 HF1, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.0 through 11.3.0, BIG-IP GTM 11.2.0 through 11.6.0, BIG-IP PSM 11.2.0 through 11.4.1, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BIG-IQ Security 4.0.0 through 4.5.0, BIG-IQ ADC 4.5.0, BIG-IQ Centralized Management 4.6.0, and BIG-IQ Cloud and Orchestration 1.0.0 allows local users with advanced shell (bash) access to gain privileges via unspecified vectors.
- Score
- CVSS 3.0 7.4 High
- Status
- Modified - cve@mitre.org
- Published
- 2016-01-12
- Last modified
- 2024-08-06
Affected products
- Big-ip Access Policy Manager (F5)
- Big-ip Advanced Firewall Manager (F5)
- Big-ip Analytics (F5)
- Big-ip Application Acceleration Manager (F5)
- Big-ip Application Security Manager (F5)
- Big-ip Domain Name System (F5)
- Big-ip Edge Gateway (F5)
- Big-ip Global Traffic Manager (F5)
- Big-ip Global Traffic Manager11.2.0 (F5)
- Big-ip Local Traffic Manager (F5)
- Big-ip Policy Enforcement Manager (F5)
- Big-ip Protocol Security Module (F5)
- Big-ip Wan Optimization Manager (F5)
- Big-ip Webaccelerator (F5)
- Big-iq Application Delivery Controller (F5)
- Big-iq Centralized Management (F5)
- Big-iq Cloud (F5)
- Big-iq Cloud And Orchestration (F5)
- Big-iq Device (F5)
- Big-iq Security (F5)
References
- http://securitytracker.com/id/1034632
- http://www.securitytracker.com/id/1034633
- https://support.f5.com/kb/en-us/solutions/public/k/75/sol75136237.html